1 // SPDX-License-Identifier: GPL-2.0
2 /*
3 * misc.c
4 *
5 * This is a collection of several routines used to extract the kernel
6 * which includes KASLR relocation, decompression, ELF parsing, and
7 * relocation processing. Additionally included are the screen and serial
8 * output functions and related debugging support functions.
9 *
10 * malloc by Hannu Savolainen 1993 and Matthias Urlichs 1994
11 * puts by Nick Holloway 1993, better puts by Martin Mares 1995
12 * High loaded stuff by Hans Lermen & Werner Almesberger, Feb. 1996
13 */
14
15 #include "misc.h"
16 #include "error.h"
17 #include "pgtable.h"
18 #include "../string.h"
19 #include "../voffset.h"
20 #include <asm/bootparam_utils.h>
21
22 /*
23 * WARNING!!
24 * This code is compiled with -fPIC and it is relocated dynamically at
25 * run time, but no relocation processing is performed. This means that
26 * it is not safe to place pointers in static structures.
27 */
28
29 /* Macros used by the included decompressor code below. */
30 #define STATIC static
31 /* Define an externally visible malloc()/free(). */
32 #define MALLOC_VISIBLE
33 #include <linux/decompress/mm.h>
34
35 /*
36 * Provide definitions of memzero and memmove as some of the decompressors will
37 * try to define their own functions if these are not defined as macros.
38 */
39 #define memzero(s, n) memset((s), 0, (n))
40 #define memmove memmove
41
42 /* Functions used by the included decompressor code below. */
43 void *memmove(void *dest, const void *src, size_t n);
44
45 /*
46 * This is set up by the setup-routine at boot-time
47 */
48 struct boot_params *boot_params;
49
50 memptr free_mem_ptr;
51 memptr free_mem_end_ptr;
52
53 static char *vidmem;
54 static int vidport;
55 static int lines, cols;
56
57 #ifdef CONFIG_KERNEL_GZIP
58 #include "../../../../lib/decompress_inflate.c"
59 #endif
60
61 #ifdef CONFIG_KERNEL_BZIP2
62 #include "../../../../lib/decompress_bunzip2.c"
63 #endif
64
65 #ifdef CONFIG_KERNEL_LZMA
66 #include "../../../../lib/decompress_unlzma.c"
67 #endif
68
69 #ifdef CONFIG_KERNEL_XZ
70 #include "../../../../lib/decompress_unxz.c"
71 #endif
72
73 #ifdef CONFIG_KERNEL_LZO
74 #include "../../../../lib/decompress_unlzo.c"
75 #endif
76
77 #ifdef CONFIG_KERNEL_LZ4
78 #include "../../../../lib/decompress_unlz4.c"
79 #endif
80
81 #ifdef CONFIG_KERNEL_ZSTD
82 #include "../../../../lib/decompress_unzstd.c"
83 #endif
84 /*
85 * NOTE: When adding a new decompressor, please update the analysis in
86 * ../header.S.
87 */
88
scroll(void)89 static void scroll(void)
90 {
91 int i;
92
93 memmove(vidmem, vidmem + cols * 2, (lines - 1) * cols * 2);
94 for (i = (lines - 1) * cols * 2; i < lines * cols * 2; i += 2)
95 vidmem[i] = ' ';
96 }
97
98 #define XMTRDY 0x20
99
100 #define TXR 0 /* Transmit register (WRITE) */
101 #define LSR 5 /* Line Status */
serial_putchar(int ch)102 static void serial_putchar(int ch)
103 {
104 unsigned timeout = 0xffff;
105
106 while ((inb(early_serial_base + LSR) & XMTRDY) == 0 && --timeout)
107 cpu_relax();
108
109 outb(ch, early_serial_base + TXR);
110 }
111
__putstr(const char * s)112 void __putstr(const char *s)
113 {
114 int x, y, pos;
115 char c;
116
117 if (early_serial_base) {
118 const char *str = s;
119 while (*str) {
120 if (*str == '\n')
121 serial_putchar('\r');
122 serial_putchar(*str++);
123 }
124 }
125
126 if (lines == 0 || cols == 0)
127 return;
128
129 x = boot_params->screen_info.orig_x;
130 y = boot_params->screen_info.orig_y;
131
132 while ((c = *s++) != '\0') {
133 if (c == '\n') {
134 x = 0;
135 if (++y >= lines) {
136 scroll();
137 y--;
138 }
139 } else {
140 vidmem[(x + cols * y) * 2] = c;
141 if (++x >= cols) {
142 x = 0;
143 if (++y >= lines) {
144 scroll();
145 y--;
146 }
147 }
148 }
149 }
150
151 boot_params->screen_info.orig_x = x;
152 boot_params->screen_info.orig_y = y;
153
154 pos = (x + cols * y) * 2; /* Update cursor position */
155 outb(14, vidport);
156 outb(0xff & (pos >> 9), vidport+1);
157 outb(15, vidport);
158 outb(0xff & (pos >> 1), vidport+1);
159 }
160
__puthex(unsigned long value)161 void __puthex(unsigned long value)
162 {
163 char alpha[2] = "0";
164 int bits;
165
166 for (bits = sizeof(value) * 8 - 4; bits >= 0; bits -= 4) {
167 unsigned long digit = (value >> bits) & 0xf;
168
169 if (digit < 0xA)
170 alpha[0] = '0' + digit;
171 else
172 alpha[0] = 'a' + (digit - 0xA);
173
174 __putstr(alpha);
175 }
176 }
177
178 #ifdef CONFIG_X86_NEED_RELOCS
handle_relocations(void * output,unsigned long output_len,unsigned long virt_addr)179 static void handle_relocations(void *output, unsigned long output_len,
180 unsigned long virt_addr)
181 {
182 int *reloc;
183 unsigned long delta, map, ptr;
184 unsigned long min_addr = (unsigned long)output;
185 unsigned long max_addr = min_addr + (VO___bss_start - VO__text);
186
187 /*
188 * Calculate the delta between where vmlinux was linked to load
189 * and where it was actually loaded.
190 */
191 delta = min_addr - LOAD_PHYSICAL_ADDR;
192
193 /*
194 * The kernel contains a table of relocation addresses. Those
195 * addresses have the final load address of the kernel in virtual
196 * memory. We are currently working in the self map. So we need to
197 * create an adjustment for kernel memory addresses to the self map.
198 * This will involve subtracting out the base address of the kernel.
199 */
200 map = delta - __START_KERNEL_map;
201
202 /*
203 * 32-bit always performs relocations. 64-bit relocations are only
204 * needed if KASLR has chosen a different starting address offset
205 * from __START_KERNEL_map.
206 */
207 if (IS_ENABLED(CONFIG_X86_64))
208 delta = virt_addr - LOAD_PHYSICAL_ADDR;
209
210 if (!delta) {
211 debug_putstr("No relocation needed... ");
212 return;
213 }
214 debug_putstr("Performing relocations... ");
215
216 /*
217 * Process relocations: 32 bit relocations first then 64 bit after.
218 * Three sets of binary relocations are added to the end of the kernel
219 * before compression. Each relocation table entry is the kernel
220 * address of the location which needs to be updated stored as a
221 * 32-bit value which is sign extended to 64 bits.
222 *
223 * Format is:
224 *
225 * kernel bits...
226 * 0 - zero terminator for 64 bit relocations
227 * 64 bit relocation repeated
228 * 0 - zero terminator for inverse 32 bit relocations
229 * 32 bit inverse relocation repeated
230 * 0 - zero terminator for 32 bit relocations
231 * 32 bit relocation repeated
232 *
233 * So we work backwards from the end of the decompressed image.
234 */
235 for (reloc = output + output_len - sizeof(*reloc); *reloc; reloc--) {
236 long extended = *reloc;
237 extended += map;
238
239 ptr = (unsigned long)extended;
240 if (ptr < min_addr || ptr > max_addr)
241 error("32-bit relocation outside of kernel!\n");
242
243 *(uint32_t *)ptr += delta;
244 }
245 #ifdef CONFIG_X86_64
246 while (*--reloc) {
247 long extended = *reloc;
248 extended += map;
249
250 ptr = (unsigned long)extended;
251 if (ptr < min_addr || ptr > max_addr)
252 error("inverse 32-bit relocation outside of kernel!\n");
253
254 *(int32_t *)ptr -= delta;
255 }
256 for (reloc--; *reloc; reloc--) {
257 long extended = *reloc;
258 extended += map;
259
260 ptr = (unsigned long)extended;
261 if (ptr < min_addr || ptr > max_addr)
262 error("64-bit relocation outside of kernel!\n");
263
264 *(uint64_t *)ptr += delta;
265 }
266 #endif
267 }
268 #else
handle_relocations(void * output,unsigned long output_len,unsigned long virt_addr)269 static inline void handle_relocations(void *output, unsigned long output_len,
270 unsigned long virt_addr)
271 { }
272 #endif
273
parse_elf(void * output)274 static void parse_elf(void *output)
275 {
276 #ifdef CONFIG_X86_64
277 Elf64_Ehdr ehdr;
278 Elf64_Phdr *phdrs, *phdr;
279 #else
280 Elf32_Ehdr ehdr;
281 Elf32_Phdr *phdrs, *phdr;
282 #endif
283 void *dest;
284 int i;
285
286 memcpy(&ehdr, output, sizeof(ehdr));
287 if (ehdr.e_ident[EI_MAG0] != ELFMAG0 ||
288 ehdr.e_ident[EI_MAG1] != ELFMAG1 ||
289 ehdr.e_ident[EI_MAG2] != ELFMAG2 ||
290 ehdr.e_ident[EI_MAG3] != ELFMAG3) {
291 error("Kernel is not a valid ELF file");
292 return;
293 }
294
295 debug_putstr("Parsing ELF... ");
296
297 phdrs = malloc(sizeof(*phdrs) * ehdr.e_phnum);
298 if (!phdrs)
299 error("Failed to allocate space for phdrs");
300
301 memcpy(phdrs, output + ehdr.e_phoff, sizeof(*phdrs) * ehdr.e_phnum);
302
303 for (i = 0; i < ehdr.e_phnum; i++) {
304 phdr = &phdrs[i];
305
306 switch (phdr->p_type) {
307 case PT_LOAD:
308 #ifdef CONFIG_X86_64
309 if ((phdr->p_align % 0x200000) != 0)
310 error("Alignment of LOAD segment isn't multiple of 2MB");
311 #endif
312 #ifdef CONFIG_RELOCATABLE
313 dest = output;
314 dest += (phdr->p_paddr - LOAD_PHYSICAL_ADDR);
315 #else
316 dest = (void *)(phdr->p_paddr);
317 #endif
318 memmove(dest, output + phdr->p_offset, phdr->p_filesz);
319 break;
320 default: /* Ignore other PT_* */ break;
321 }
322 }
323
324 free(phdrs);
325 }
326
327 /*
328 * The compressed kernel image (ZO), has been moved so that its position
329 * is against the end of the buffer used to hold the uncompressed kernel
330 * image (VO) and the execution environment (.bss, .brk), which makes sure
331 * there is room to do the in-place decompression. (See header.S for the
332 * calculations.)
333 *
334 * |-----compressed kernel image------|
335 * V V
336 * 0 extract_offset +INIT_SIZE
337 * |-----------|---------------|-------------------------|--------|
338 * | | | |
339 * VO__text startup_32 of ZO VO__end ZO__end
340 * ^ ^
341 * |-------uncompressed kernel image---------|
342 *
343 */
extract_kernel(void * rmode,memptr heap,unsigned char * input_data,unsigned long input_len,unsigned char * output,unsigned long output_len)344 asmlinkage __visible void *extract_kernel(void *rmode, memptr heap,
345 unsigned char *input_data,
346 unsigned long input_len,
347 unsigned char *output,
348 unsigned long output_len)
349 {
350 const unsigned long kernel_total_size = VO__end - VO__text;
351 unsigned long virt_addr = LOAD_PHYSICAL_ADDR;
352 unsigned long needed_size;
353
354 /* Retain x86 boot parameters pointer passed from startup_32/64. */
355 boot_params = rmode;
356
357 /* Clear flags intended for solely in-kernel use. */
358 boot_params->hdr.loadflags &= ~KASLR_FLAG;
359
360 sanitize_boot_params(boot_params);
361
362 if (boot_params->screen_info.orig_video_mode == 7) {
363 vidmem = (char *) 0xb0000;
364 vidport = 0x3b4;
365 } else {
366 vidmem = (char *) 0xb8000;
367 vidport = 0x3d4;
368 }
369
370 lines = boot_params->screen_info.orig_video_lines;
371 cols = boot_params->screen_info.orig_video_cols;
372
373 console_init();
374
375 /*
376 * Save RSDP address for later use. Have this after console_init()
377 * so that early debugging output from the RSDP parsing code can be
378 * collected.
379 */
380 boot_params->acpi_rsdp_addr = get_rsdp_addr();
381
382 debug_putstr("early console in extract_kernel\n");
383
384 free_mem_ptr = heap; /* Heap */
385 free_mem_end_ptr = heap + BOOT_HEAP_SIZE;
386
387 /*
388 * The memory hole needed for the kernel is the larger of either
389 * the entire decompressed kernel plus relocation table, or the
390 * entire decompressed kernel plus .bss and .brk sections.
391 *
392 * On X86_64, the memory is mapped with PMD pages. Round the
393 * size up so that the full extent of PMD pages mapped is
394 * included in the check against the valid memory table
395 * entries. This ensures the full mapped area is usable RAM
396 * and doesn't include any reserved areas.
397 */
398 needed_size = max(output_len, kernel_total_size);
399 #ifdef CONFIG_X86_64
400 needed_size = ALIGN(needed_size, MIN_KERNEL_ALIGN);
401 #endif
402
403 /* Report initial kernel position details. */
404 debug_putaddr(input_data);
405 debug_putaddr(input_len);
406 debug_putaddr(output);
407 debug_putaddr(output_len);
408 debug_putaddr(kernel_total_size);
409 debug_putaddr(needed_size);
410
411 #ifdef CONFIG_X86_64
412 /* Report address of 32-bit trampoline */
413 debug_putaddr(trampoline_32bit);
414 #endif
415
416 choose_random_location((unsigned long)input_data, input_len,
417 (unsigned long *)&output,
418 needed_size,
419 &virt_addr);
420
421 /* Validate memory location choices. */
422 if ((unsigned long)output & (MIN_KERNEL_ALIGN - 1))
423 error("Destination physical address inappropriately aligned");
424 if (virt_addr & (MIN_KERNEL_ALIGN - 1))
425 error("Destination virtual address inappropriately aligned");
426 #ifdef CONFIG_X86_64
427 if (heap > 0x3fffffffffffUL)
428 error("Destination address too large");
429 if (virt_addr + max(output_len, kernel_total_size) > KERNEL_IMAGE_SIZE)
430 error("Destination virtual address is beyond the kernel mapping area");
431 #else
432 if (heap > ((-__PAGE_OFFSET-(128<<20)-1) & 0x7fffffff))
433 error("Destination address too large");
434 #endif
435 #ifndef CONFIG_RELOCATABLE
436 if (virt_addr != LOAD_PHYSICAL_ADDR)
437 error("Destination virtual address changed when not relocatable");
438 #endif
439
440 debug_putstr("\nDecompressing Linux... ");
441 __decompress(input_data, input_len, NULL, NULL, output, output_len,
442 NULL, error);
443 parse_elf(output);
444 handle_relocations(output, output_len, virt_addr);
445 debug_putstr("done.\nBooting the kernel.\n");
446
447 /* Disable exception handling before booting the kernel */
448 cleanup_exception_handling();
449
450 return output;
451 }
452
fortify_panic(const char * name)453 void fortify_panic(const char *name)
454 {
455 error("detected buffer overflow");
456 }
457